CVE Catalog
CVE-2026-50359
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.26%
18th percentile - higher than 18% of all known CVEs
Summary
A use-after-free vulnerability in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could gain elevated privileges and execute arbitrary code in the XML services context, potentially affecting other applications using MSXML.
Recommendation
Apply security updates for Microsoft XML Core Services (MSXML).
Other vulnerabilities in Microsoft XML Core Services
Original NVD description (English source)
Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally.